CVE-2015-6827

MEDIO 6.8CVE-2015-6827 · Published 11/09/2015 · updated 17/06/2026

In breve

CVE-2015-6827 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda auto-exchanger (auto-exchanger).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 80.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
auto-exchanger auto-exchanger	`= 5.1.0`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php.

References

packetstormsecurity.com/files/133498/Autoexchanger-5.1.0-Cross-Site-Request-Forgery.html
exploit-db.com/exploits/38119 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free